pkgsrc/devel/apr/distinfo

8 lines
471 B
Text
Raw Normal View History

$NetBSD: distinfo,v 1.41 2015/11/03 03:27:14 agc Exp $
Update to 1.5.2: -*- coding: utf-8 -*- Changes for APR 1.5.2 *) SECURITY: CVE-2015-1829 (cve.mitre.org) APR applications using APR named pipe support on Windows can be vulnerable to a pipe squatting attack from a local process; the extent of the vulnerability, when present, depends on the application. Initial analysis and report was provided by John Hernandez of Casaba Security via HP SSRT Security Alert. [Yann Ylavic] *) apr_atomic: Fix errors when building on Visual Studio 2013 while maintaining the ability to build on Visual Studio 6 with Windows Server 2003 R2 SDK. PR 57191. [Gregg Smith] *) Switch to generic atomics for early/unpatched Solaris 10 not exporting some atomic functions. PR 55418. [Yann Ylavic] *) apr_file_mktemp() on HP-UX: Remove limitation of 26 temporary files per process. PR 57677. [Jeff Trawick] *) apr_escape: Correctly calculate the size of the returned string in apr_escape_path and set the correct return value in case we actually escape the string. [<aduryagin gmail.com>] PR 57230. *) pollcb on Windows: Handle calls with no file/socket descriptors. Follow up to PR 49882. [Jeff Trawick, Yann Ylavic] *) apr_poll(cb): fix error paths returned values and leaks. [Yann Ylavic] *) apr_thread_cond_*wait() on BeOS: Fix broken logic. PR 45800. [Jochen Voss (no e-mail)] *) apr_skiplist: Optimize the number of allocations by reusing pooled or malloc()ed nodes for the lifetime of the skiplist. [Yann Ylavic] *) apr_skiplist: Fix possible multiple-free() on the same value in apr_skiplist_remove_all(). [Yann Ylavic] *) apr_pollset: On z/OS, threadsafe apr_pollset_poll() may return "EDC8102I Operation would block" under load. [Pat Odonnell <patod us.ibm.com>] *) On z/OS, apr_sockaddr_info_get() with family == APR_UNSPEC was not returning IPv4 addresses if any IPv6 addresses were returned. [Eric Covener] *) Windows cmake build: Fix an incompatibility with cmake 2.8.12 and later. [Jeff Trawick] *) apr_global_mutex/apr_proc_mutex: Resolve failures with the POSIX sem implementation in environments which receive signals. [Jeff Trawick] *) apr_skiplist: Fix potential corruption of skiplists leading to results or crashes. [Takashi Sato <takashi tks st>, Eric Covener] PR 56654. *) Improve platform detection by updating config.guess and config.sub. [Rainer Jung]
2015-05-28 08:39:32 +02:00
SHA1 (apr-1.5.2.tar.bz2) = 6d757fcf7c687fc300c1066076f2e8380ff8cbc0
RMD160 (apr-1.5.2.tar.bz2) = 85c581b26684e962247182c6ea1055fe13d33026
SHA512 (apr-1.5.2.tar.bz2) = d1156ad16abf07887797777b56c2147c890f16d8445829b3e3b4917950d24c5fd2f8febd439992467a5ea0511da562c0fb4a7cfd8a235ab55882388bfa2b919d
Update to 1.5.2: -*- coding: utf-8 -*- Changes for APR 1.5.2 *) SECURITY: CVE-2015-1829 (cve.mitre.org) APR applications using APR named pipe support on Windows can be vulnerable to a pipe squatting attack from a local process; the extent of the vulnerability, when present, depends on the application. Initial analysis and report was provided by John Hernandez of Casaba Security via HP SSRT Security Alert. [Yann Ylavic] *) apr_atomic: Fix errors when building on Visual Studio 2013 while maintaining the ability to build on Visual Studio 6 with Windows Server 2003 R2 SDK. PR 57191. [Gregg Smith] *) Switch to generic atomics for early/unpatched Solaris 10 not exporting some atomic functions. PR 55418. [Yann Ylavic] *) apr_file_mktemp() on HP-UX: Remove limitation of 26 temporary files per process. PR 57677. [Jeff Trawick] *) apr_escape: Correctly calculate the size of the returned string in apr_escape_path and set the correct return value in case we actually escape the string. [<aduryagin gmail.com>] PR 57230. *) pollcb on Windows: Handle calls with no file/socket descriptors. Follow up to PR 49882. [Jeff Trawick, Yann Ylavic] *) apr_poll(cb): fix error paths returned values and leaks. [Yann Ylavic] *) apr_thread_cond_*wait() on BeOS: Fix broken logic. PR 45800. [Jochen Voss (no e-mail)] *) apr_skiplist: Optimize the number of allocations by reusing pooled or malloc()ed nodes for the lifetime of the skiplist. [Yann Ylavic] *) apr_skiplist: Fix possible multiple-free() on the same value in apr_skiplist_remove_all(). [Yann Ylavic] *) apr_pollset: On z/OS, threadsafe apr_pollset_poll() may return "EDC8102I Operation would block" under load. [Pat Odonnell <patod us.ibm.com>] *) On z/OS, apr_sockaddr_info_get() with family == APR_UNSPEC was not returning IPv4 addresses if any IPv6 addresses were returned. [Eric Covener] *) Windows cmake build: Fix an incompatibility with cmake 2.8.12 and later. [Jeff Trawick] *) apr_global_mutex/apr_proc_mutex: Resolve failures with the POSIX sem implementation in environments which receive signals. [Jeff Trawick] *) apr_skiplist: Fix potential corruption of skiplists leading to results or crashes. [Takashi Sato <takashi tks st>, Eric Covener] PR 56654. *) Improve platform detection by updating config.guess and config.sub. [Rainer Jung]
2015-05-28 08:39:32 +02:00
Size (apr-1.5.2.tar.bz2) = 826885 bytes
SHA1 (patch-include_apr__general.h) = bff357eee11218a6c53769278fc3f9094b062fdf